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DETAILED ACTION 

Specification 

The abstract of the disclosure is objected to because it exceeds 150 words in 
length. Correction is required. See MPEP § 608.01(b). 

Applicant is reminded of the proper language and format for an abstract of the 
disclosure. 

The abstract should be in narrative form and generally limited to a single 
paragraph on a separate sheet within the range of 50 to 150 words. It is important that 
the abstract not exceed 150 words in length since the space provided for the abstract 
on the computer tape used by the printer is limited. The form and legal phraseology 
often used in patent claims, such as "means" and "said," should be avoided. The 
abstract should describe the disclosure sufficiently to assist readers in deciding whether 
there is a need for consulting the full patent text for details. 

The language should be clear and concise and should not repeat information 
given in the title. It should avoid using phrases which can be implied, such as, "The 
disclosure concerns," "The disclosure defined by this invention," "The disclosure 
describes," etc. 

The disclosure is objected to because it contains an embedded hyperlink and/or 
other form of browser-executable code (page 5, line 9). Applicant is required to delete 
the embedded hyperlink and/or other form of browser-executable code. See MPEP § 
608.01. 
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The disclosure is objected to because of the following informalities: "SMP" (page 
5, line 10). While well known in the art, these terms have not been defined. 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

Claims 1-2, 4-5, 9-10, 12-13, 17-18, and 20-21 are rejected under 35 
U.S.C. 102(b) as being anticipated by Bright et al. (US Patent Number: 6,141,756). 

Regarding claim 1 , Bright et al. teach a computer program product comprising 
processor executable instructions for programming a non-volatile storage element in a 
data processing system, the instructions being stored on a computer readable medium 
(column 1, lines 60-67, column 2, lines 1-26, column 5, lines 24-32), comprising: 
computer code means for encrypting a digital signature using a first encryption key 
(column 3, lines 40-57); computer code means for passing the encrypted signature to a 
kernel routine (column 3, lines 58-67, column 4, lines 1-13); computer code means, 
responsive to successfully decrypting the encrypted signature using a second 
encryption key, for transitioning the data processing system from a protected-mode to a 
real-mode (column 4, lines 14-32); and real-mode computer code means for flash 
programming the non-volatile storage element (column 5, lines 1-13). 

Regarding claim 2, Bright et al. teach wherein the code means for encrypting the 
digital signature is non-privileged code. 
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Regarding claim 4, Bright et al. teach wherein the first encryption key is a private 
key and the second encryption key is a public key, wherein the public key and private 
key are generated from a common algorithm. 

Regarding claim 5, Bright et al. teach further comprising code means for 
generating the digital signature, wherein the digital signature includes information that is 
indicative of the data processing system (column 3, lines 46-57). 

Regarding claim 9, Bright et al. teach a data processing system including at least 
one processor, memory, and input means connected to a common bus, wherein the 
system memory contains at least a portion of a sequence of computer executable 
instructions for programming a non-volatile storage element of the data processing 
system (column 1, lines 60-67, column 2, lines 1-26, column 5, lines 24-32), the 
instructions comprising: computer code means for encrypting a digital signature using a 
first encryption key (column 3, lines 40-57); computer code means for passing the 
encrypted signature to a kernel routine (column 3, lines 58-67, column 4, lines 1-13); 
computer code means, responsive to successfully decrypting the encrypted signature 
using a second encryption key, for transitioning the data processing system from a 
protected-mode to a real-mode (column 4, lines 14-32); and real-mode computer code 
means for flash programming the non-volatile storage element (column 5, lines 1-13). 

Regarding claim 10, Bright et al. teach wherein the code means for encrypting 
the digital signature is non-privileged code. 
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Regarding claim 12, Bright et al. teach wherein the first encryption key is a 
private key and the second encryption key is a public key, wherein the public key and 
private key are generated from a common algorithm. 

Regarding claim 13, Bright et al. teach further comprising code means for 
generating the digital signature, wherein the digital signature includes information that is 
indicative of the data processing system (column 3, lines 46-57). 

Regarding claim 17, Bright et al. teach a method of programming a non-volatile 
storage element in a data processing system (column 1, lines 60-67, column 2, lines 1- 
26, column 5, lines 24-32), comprising: encrypting a digital signature using a first 
encryption key (column 3, lines 40-57); passing the encrypted signature to a kernel 
code routine (column 3, lines 58-67, column 4, lines 1-13); responsive to successfully 
decrypting the encrypted signature using a second encryption key, transitioning the data 
processing system from a protected-mode to a real-mode with the kernel code routine 
(column 4, lines 14-32); and flash programming the non-volatile storage element in real 
mode (column 5, lines 1-13). 

Regarding claim 18, Bright et al. teach wherein encrypting the digital signature 
comprises encrypting the digital signature with non-privileged code. 

Regarding claim 20, Bright et al. teach wherein the first encryption key is a 
private key and the second encryption key is a public key, wherein the public key and 
private key are generated from a common algorithm. 
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Regarding claim 21, Bright et al. teach further comprising generating the digital 
signature, wherein the digital signature includes information that is indicative of the data 
processing system (column 3, lines 46-57). 
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Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

Claims 3, 11, and 19 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Bright et al. as applied to claims 2, 10, and 18 respectively above, and further in 
view of Hughes (US Patent Number: 5,968,174). 

Regarding claims 3 and 1 1 , Bright et al. teach the limitations as set forth under 
claims 2 and 10 respectively above. Bright et al. do not disclose expressly wherein the 
code means for passing the encrypted signature to the kernel routine comprises code 
means for executing a system call from the non-privileged code and passing the 
signature as a parameter of the system call. However, Hughes teaches wherein the 
code means for passing the encrypted signature to the kernel routine comprises code 
means for executing a system call from the non-privileged code and passing the 
signature as a parameter of the system call (column 7, lines 28-32). Therefore, it would 
have been obvious to one having ordinary skill in the art at the time the invention was 
made to execute a system call and pass a parameter to a system call. One of ordinary 
skill in the art would have been motivated to do so because it is well known in the art to 
execute a system call from the non-privileged mode and passing a value as a 
parameter to a system call. 
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Regarding claim 19, Bright et al. teach the limitations as set forth under claim 18 
above. Bright et al. do not disclose expressly wherein passing the encrypted signature 
to the kernel routine comprises executing a system call from the non-privileged code 
and passing the signature as a parameter of the system call. However, Hughes teaches 
wherein passing the encrypted signature to the kernel routine comprises executing a 
system call from the non-privileged code and passing the signature as a parameter of 
the system call (column 7, lines 28-32). Therefore, it would have been obvious to one 
having ordinary skill in the art at the time the invention was made to execute a system 
call and pass a parameter to a system call. One of ordinary skill in the art would have 
been motivated to do so because it is well known in the art to execute a system call 
from the non-privileged mode and passing a value as a parameter to a system call. 

Claims 6-7, 14-15, and 22-23 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Bright et al. as applied to claims 5, 13, and 21 respectively above, 
and further in view of Cuccia et al. (US Patent Number: 6,151,676). 

Regarding claims 6, 14, and 22, Bright et al. teach the limitations as set forth 
under claims 5, 13, and 21 respectively above. Bright et al. do not disclose expressly 
wherein the digital signature is generated based at least in part upon dynamic 
information. However, Cuccia et al. teach wherein the digital signature is generated 
based at least in part upon dynamic information (column 8, lines 13-20). Therefore, it 
would have been obvious to one having ordinary skill in the art at the time the invention 
was made to generate a digital signature from dynamic information. One of ordinary skill 
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in the art would have been motivated to perform such a modification to provide a way to 
authenticate a user (Cuccia et al., column 2, lines 34-40). 

Regarding claims 7, 15, and 23, the combination of Bright et al. and Cuccia et al. 
teaches the limitations as set forth under claims 6, 14, and 22 respectively above. 
Furthermore, Bright et al. teach wherein the digital signature is generated at least in part 
based further upon information including a corresponding hostname and process ID 
(column 3, lines 50-52, a hash function). 

Claims 8, 16, and 24 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Bright et al. as applied to claims 1, 9, and 17 respectively above, and further in 
view of Cuccia et al. 

Regarding claims 8, 16, and 24, Bright et al. teach the limitations as set forth 
under claims 1, 9, and 17 respectively above. Bright et al. do not disclose expressly 
further comprising code means for generating a random number as the digital signature. 
However, Cuccia et al. teach further comprising code means for generating a random 
number as the digital signature (column 8, lines 13-20). Therefore, it would have been 
obvious to one having ordinary skill in the art at the time the invention was made to 
generate a random number as the digital signature. One of ordinary skill in the art would 
have been motivated to perform such a modification to provide a way to authenticate a 
user (Cuccia et al., column 2, lines 34-40). 
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Conclusion 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to David G. Cervetti whose telephone number is (571) 272- 
5861. The examiner can normally be reached on Monday-Friday 8:30 am - 5:00 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R. Sheikh can be reached on (571)272-3795. The fax phone number 
for the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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